Alarming WordPress Security Vulnerabilities

beNi released 3 alarming vulnerabilities in the popular WordPress blog platform

  1. Cross Site Scripting - it didn’t work for me
  2. Forced Redirect - it worked for me
  3. Directory Traversal - n /a

Due to the really huge install base, I really hope that the folks at wordpress.org issue a patch quickly to address these vulnerabilities. Update : It sems that the site hosting the proof of concept exploits is down for maintenance.(thanks leion)

Share This

If you enjoyed this post, make sure you subscribe to my RSS feed!



Thank you for reading this post. You can now Read Comment (1) or Leave A Trackback.

Post Info

This entry was posted on Sunday, February 11th, 2007 and is filed under Web Applications.

You can follow any responses to this entry through the Comments Feed. You can Leave A Comment, or A Trackback.



Previous Post: How to Turn Firefox Into an Attack Webserver »
Next Post: Here is the definitive fix for Universal PDF XSS Vulnerability »

Read More

Related Reading:

Latest Posts:

One Response to “Alarming WordPress Security Vulnerabilities”



Leave a Reply

Note: Any comments are permitted only because the site owner is letting you post, and any comments will be removed for any reason at the absolute discretion of the site owner.

Close
E-mail It